🚨 Important Security Update – Apache HTTP Server
A critical vulnerability (CVE-2026-23918) has been identified in Apache’s HTTP/2 module, which could potentially be exploited for remote code execution.
🔗 More details:
https://support.cpanel.net/hc/en-us/articles/40229402602519-Security-CVE-2026-23918
⚠️ Action required: Update your Apache immediately.
🖥 RHEL-based servers
✅ Verify the update:
Stay secure and make sure to review the official advisory carefully.
@sharedlicense
A critical vulnerability (CVE-2026-23918) has been identified in Apache’s HTTP/2 module, which could potentially be exploited for remote code execution.
🔗 More details:
https://support.cpanel.net/hc/en-us/articles/40229402602519-Security-CVE-2026-23918
⚠️ Action required: Update your Apache immediately.
🖥 RHEL-based servers
yum clean all
yum makecache
yum -y update ea-apache*
dnf clean all
dnf makecache
dnf -y update ea-apache*
apt update
apt install --only-upgrade "ea-apache24*"
✅ Verify the update:
httpd -v
Apache = 2.4.67
Stay secure and make sure to review the official advisory carefully.
@sharedlicense
SharedLicense
🚨 Important Security Update – Apache HTTP Server A critical vulnerability (CVE-2026-23918) has been identified in Apache’s HTTP/2 module, which could potentially be exploited for remote code execution. 🔗 More details: https://support.cpanel.net/hc/en-us/a…
🛡 Mitigations – CVE-2026-23918 (Apache RCE)
Due to Apache’s wide usage, this vulnerability is high-risk and needs immediate attention.
⚠️ If you can’t update immediately, take these actions:
• 🔄 Upgrade to Apache 2.4.67 → Only full fix for all vulnerabilities
• 🚫 Disable HTTP/2 (temporary) → Reduces exposure to RCE attack
• 🧩 Remove mod_dav_lock (if unused) → Mitigates CVE-2026-29169
• 🔐 Audit .htaccess permissions → Prevent privilege escalation (CVE-2026-24072)
⚠️ Best practice: Update ASAP — mitigations are temporary, not a fix.
Due to Apache’s wide usage, this vulnerability is high-risk and needs immediate attention.
⚠️ If you can’t update immediately, take these actions:
• 🔄 Upgrade to Apache 2.4.67 → Only full fix for all vulnerabilities
• 🚫 Disable HTTP/2 (temporary) → Reduces exposure to RCE attack
• 🧩 Remove mod_dav_lock (if unused) → Mitigates CVE-2026-29169
• 🔐 Audit .htaccess permissions → Prevent privilege escalation (CVE-2026-24072)
⚠️ Best practice: Update ASAP — mitigations are temporary, not a fix.
SharedLicense
🚨 Important Security Update – Apache HTTP Server A critical vulnerability (CVE-2026-23918) has been identified in Apache’s HTTP/2 module, which could potentially be exploited for remote code execution. 🔗 More details: https://support.cpanel.net/hc/en-us/a…
CloudLinux users can update their Apache using cl-ea4-testing repo,
https://cloudlinux.zendesk.com/hc/en-us/articles/27239221402908-Apache-CVE-2026-23918-ea-apache24-2-4-67-is-not-available-in-CloudLinux-repositories
Command :
https://cloudlinux.zendesk.com/hc/en-us/articles/27239221402908-Apache-CVE-2026-23918-ea-apache24-2-4-67-is-not-available-in-CloudLinux-repositories
Command :
yum update ea-apache24 --enablerepo=cl-ea4-testing
⚠️ A newly disclosed Linux kernel vulnerability known as Dirty Frag has been identified and may affect shared hosting environments.
Our team is currently reviewing the impact and preparing patched kernel updates. We will publish an additional announcement once fixed kernels are available in the repositories.
Until the official patches are released, we recommend applying the temporary mitigation steps provided here:
https://blog.cloudlinux.com/dirty-frag-mitigation-and-kernel-update
Please check the section “Apply this mitigation now” and follow the instructions carefully to minimize potential exposure.
— SharedLicense Security Team
@SharedLicense
Our team is currently reviewing the impact and preparing patched kernel updates. We will publish an additional announcement once fixed kernels are available in the repositories.
Until the official patches are released, we recommend applying the temporary mitigation steps provided here:
https://blog.cloudlinux.com/dirty-frag-mitigation-and-kernel-update
Please check the section “Apply this mitigation now” and follow the instructions carefully to minimize potential exposure.
— SharedLicense Security Team
@SharedLicense
⚠️ Security Update Recommended
The following security vulnerabilities have been patched:
• CVE-2026-29201 — Arbitrary file read
• CVE-2026-29202 — Perl code injection
• CVE-2026-29203 — Symlink privilege escalation issue
Please update your server immediately using:
Updating is strongly recommended for all servers.
@SharedLicense
The following security vulnerabilities have been patched:
• CVE-2026-29201 — Arbitrary file read
• CVE-2026-29202 — Perl code injection
• CVE-2026-29203 — Symlink privilege escalation issue
Please update your server immediately using:
/usr/local/cpanel/scripts/upcp --force
Updating is strongly recommended for all servers.
@SharedLicense
🚨 Important WHMCS Security Update – CVE-2026-29204
A critical security vulnerability has been identified in WHMCS versions 7.4 and later.
This issue could allow an authenticated user to access or perform actions on services belonging to other users due to insufficient authorization checks within the Client Area.
✅ Affected Versions:
• All WHMCS 9.x builds prior to 9.0.4
• All WHMCS 8.x builds prior to 8.13.3
• All WHMCS 7.x versions after 7.4.0
🔒 Required Action:
If you are running WHMCS 8.x, you MUST upgrade immediately to:
➡️ WHMCS 8.13.3
If you are running WHMCS 9.x, you MUST upgrade immediately to:
➡️ WHMCS 9.0.4
⚠️ We strongly recommend updating as soon as possible and reviewing the WHMCS Activity Log for any suspicious Single Sign-On or unexpected service access activity.
Stay secure and keep your WHMCS installation fully update
@sharedlicense
@SharedLicenseSupport
A critical security vulnerability has been identified in WHMCS versions 7.4 and later.
This issue could allow an authenticated user to access or perform actions on services belonging to other users due to insufficient authorization checks within the Client Area.
✅ Affected Versions:
• All WHMCS 9.x builds prior to 9.0.4
• All WHMCS 8.x builds prior to 8.13.3
• All WHMCS 7.x versions after 7.4.0
🔒 Required Action:
If you are running WHMCS 8.x, you MUST upgrade immediately to:
➡️ WHMCS 8.13.3
If you are running WHMCS 9.x, you MUST upgrade immediately to:
➡️ WHMCS 9.0.4
⚠️ We strongly recommend updating as soon as possible and reviewing the WHMCS Activity Log for any suspicious Single Sign-On or unexpected service access activity.
Stay secure and keep your WHMCS installation fully update
@sharedlicense
@SharedLicenseSupport
🚨 cPanel Released Another Security Update
The cPanel Change Log now includes a new Targeted Security Release containing important security fixes and system improvements for WHM/cPanel servers.
You can also monitor all official security advisories and announcements here:
🔐 cPanel Security Advisories
Please update your server immediately using:
⚠️ Delaying critical security updates may expose servers to publicly known vulnerabilities.
@sharedlicense
@SharedLicenseSupport
The cPanel Change Log now includes a new Targeted Security Release containing important security fixes and system improvements for WHM/cPanel servers.
You can also monitor all official security advisories and announcements here:
🔐 cPanel Security Advisories
Please update your server immediately using:
/usr/local/cpanel/scripts/upcp --force
⚠️ Delaying critical security updates may expose servers to publicly known vulnerabilities.
@sharedlicense
@SharedLicenseSupport
🚨 Important Security Alert – cPanel & LiteSpeed (May 19, 2026)
A critical vulnerability was found in the LiteSpeed cPanel plugin that may allow unauthorized ROOT access.
✅ cPanel now automatically removes the LiteSpeed WHM plugin during updates.
📌 LiteSpeed Web Server itself continues working normally.
🔧 Run update immediately:
🔧 Remove LiteSpeed plugin manually now:
⚠️ cPanel also released critical security patches for multiple versions.
✅ Verify version after update:
🚫 If you cannot update immediately, block ports:
2079 & 2080
🔗 More info:
https://docs.cpanel.net/changelogs/
A critical vulnerability was found in the LiteSpeed cPanel plugin that may allow unauthorized ROOT access.
✅ cPanel now automatically removes the LiteSpeed WHM plugin during updates.
📌 LiteSpeed Web Server itself continues working normally.
🔧 Run update immediately:
/scripts/upcp --force
🔧 Remove LiteSpeed plugin manually now:
usr/local/lsws/admin/misc/lscmctl cpanelplugin --uninstall
/usr/local/lsws/admin/misc/lscmctl cpanelplugin --autoinstall 0
⚠️ cPanel also released critical security patches for multiple versions.
✅ Verify version after update:
/usr/local/cpanel/cpanel -V
🚫 If you cannot update immediately, block ports:
2079 & 2080
🔗 More info:
https://docs.cpanel.net/changelogs/
🚨 Urgent Security Notice – LiteSpeed cPanel Plugin (Jun 14, 2026)
LiteSpeed has disclosed a critical privilege escalation vulnerability (CVE-2026-54420) affecting the LiteSpeed User-End cPanel Plugin versions prior to v2.4.8. The vulnerability is reportedly being actively exploited.
If you are using LiteSpeed with cPanel, please update immediately to:
✅ LiteSpeed WHM Plugin v5.3.2.1 or later
✅ LiteSpeed cPanel Plugin v2.4.8 or later
Update command:
🔗 https://blog.litespeedtech.com/2026/06/01/security-update-for-litespeed-cpanel-plugin-2/
We strongly recommend all customers perform this update as soon as possible to protect their servers.
➖➖➖➖➖➖➖➖➖➖➖➖
SLC Software - SharedLicense
SharedLicense
info@sharedlicense.com
LiteSpeed has disclosed a critical privilege escalation vulnerability (CVE-2026-54420) affecting the LiteSpeed User-End cPanel Plugin versions prior to v2.4.8. The vulnerability is reportedly being actively exploited.
If you are using LiteSpeed with cPanel, please update immediately to:
✅ LiteSpeed WHM Plugin v5.3.2.1 or later
✅ LiteSpeed cPanel Plugin v2.4.8 or later
Update command:
wget -O- https://litespeedtech.com/packages/cpanel/lsws_whm_plugin_install.sh | sh
🔗 https://blog.litespeedtech.com/2026/06/01/security-update-for-litespeed-cpanel-plugin-2/
We strongly recommend all customers perform this update as soon as possible to protect their servers.
➖➖➖➖➖➖➖➖➖➖➖➖
SLC Software - SharedLicense
SharedLicense
info@sharedlicense.com
📢 Crypto Payment Gateway Notice
Dear Customers,
Please note that our previous cryptocurrency wallet addresses have expired and should no longer be used for new payments. A new crypto payment gateway is now active.
⚠️ Important: For all future deposits, please use the new wallet addresses displayed during the payment process. Do not send funds to any wallet addresses you may have used previously.
We currently support the following cryptocurrencies and networks:
• BTC (Bitcoin)
• ETH (Ethereum)
• LTC (Litecoin)
• BCH (Bitcoin Cash)
• XMR (Monero)
• SOL (Solana)
• TRX (TRON)
• MATIC (Polygon)
• USDT (TRC20)
• USDT (ERC20)
• USDT (BEP20)
• USDT (SOL)
• USDT (POLYGON)
Thank you for your cooperation and continued trust in our services.
➖➖➖➖➖➖➖➖➖➖➖➖
SLC Software - SharedLicense
SharedLicense
info@sharedlicense.com
Dear Customers,
Please note that our previous cryptocurrency wallet addresses have expired and should no longer be used for new payments. A new crypto payment gateway is now active.
⚠️ Important: For all future deposits, please use the new wallet addresses displayed during the payment process. Do not send funds to any wallet addresses you may have used previously.
We currently support the following cryptocurrencies and networks:
• BTC (Bitcoin)
• ETH (Ethereum)
• LTC (Litecoin)
• BCH (Bitcoin Cash)
• XMR (Monero)
• SOL (Solana)
• TRX (TRON)
• MATIC (Polygon)
• USDT (TRC20)
• USDT (ERC20)
• USDT (BEP20)
• USDT (SOL)
• USDT (POLYGON)
Thank you for your cooperation and continued trust in our services.
➖➖➖➖➖➖➖➖➖➖➖➖
SLC Software - SharedLicense
SharedLicense
info@sharedlicense.com
📢 Announcement:
DirectAdmin Update v1.705
DirectAdmin has been updated to the latest stable version.
If you need to force the update manually on your server, run the following command:
If you encounter any issues after the update, please open a support ticket.
➖➖➖➖➖➖➖➖➖➖➖➖
SLC Software - SharedLicense
SharedLicense
info@sharedlicense.com
DirectAdmin Update v1.705
DirectAdmin has been updated to the latest stable version.
If you need to force the update manually on your server, run the following command:
/usr/bin/update_diradm --force
If you encounter any issues after the update, please open a support ticket.
➖➖➖➖➖➖➖➖➖➖➖➖
SLC Software - SharedLicense
SharedLicense
info@sharedlicense.com
🔐 Stay Up to Date with Security Advisories
Control panels, software, and web services are constantly releasing security updates and fixing critical vulnerabilities.
With new security issues being published every few days, keeping track of everything can be difficult.
That’s why we created a dedicated Security Advisories page where important security updates and vulnerabilities are collected in one place.
📌 You can find:
• Critical security vulnerabilities
• Security updates for popular control panels & software
• Information about affected versions
• Relevant fixes and update instructions
• Helpful guides and tutorials
⏱️ Just check it every few days to stay informed and make sure your systems are up to date.
🔗 Check the latest Security Advisories:
Security Advisories
➖➖➖➖➖➖➖➖➖➖➖➖
SLC Software - SharedLicense
Support :
info@sharedlicense.com
@SharedLicenseSupport
Channel :
@SharedLicense
Control panels, software, and web services are constantly releasing security updates and fixing critical vulnerabilities.
With new security issues being published every few days, keeping track of everything can be difficult.
That’s why we created a dedicated Security Advisories page where important security updates and vulnerabilities are collected in one place.
📌 You can find:
• Critical security vulnerabilities
• Security updates for popular control panels & software
• Information about affected versions
• Relevant fixes and update instructions
• Helpful guides and tutorials
⏱️ Just check it every few days to stay informed and make sure your systems are up to date.
🔗 Check the latest Security Advisories:
Security Advisories
➖➖➖➖➖➖➖➖➖➖➖➖
SLC Software - SharedLicense
Support :
info@sharedlicense.com
@SharedLicenseSupport
Channel :
@SharedLicense
SharedLicense pinned «🔐 Stay Up to Date with Security Advisories Control panels, software, and web services are constantly releasing security updates and fixing critical vulnerabilities. With new security issues being published every few days, keeping track of everything can…»
🚀 How to Update LiteSpeed to the Latest Version
Connect to your server via SSH and run:
Then execute:
When prompted,:
Finally, update the license by running:
✅ LiteSpeed and its license should now be updated successfully.
➖➖➖➖➖➖➖➖➖➖➖➖
SLC Software - SharedLicense
Support :
info@sharedlicense.com
@SharedLicenseSupport
Channel :
@SharedLicense
Connect to your server via SSH and run:
CSPUpdate -u LiteSpeed
Then execute:
update_lswsv2 --set-version
When prompted,:
0
Finally, update the license by running:
update_lswsv2 --force
✅ LiteSpeed and its license should now be updated successfully.
➖➖➖➖➖➖➖➖➖➖➖➖
SLC Software - SharedLicense
Support :
info@sharedlicense.com
@SharedLicenseSupport
Channel :
@SharedLicense
🔔 Telegram Notifications Are Back!
The Telegram notification issue has been resolved. You can now receive your notifications directly on Telegram.
To connect Telegram, follow this path:
Profile Menu → Manage Notifications → Messenger Connections → Click “here” to connect Telegram to your account.
Enjoy hassle-free notifications! ✅
➖➖➖➖➖➖➖➖➖➖➖➖
SLC Software - SharedLicense
Support :
info@sharedlicense.com
@SharedLicenseSupport
Channel :
@SharedLicense
The Telegram notification issue has been resolved. You can now receive your notifications directly on Telegram.
To connect Telegram, follow this path:
Profile Menu → Manage Notifications → Messenger Connections → Click “here” to connect Telegram to your account.
Enjoy hassle-free notifications! ✅
➖➖➖➖➖➖➖➖➖➖➖➖
SLC Software - SharedLicense
Support :
info@sharedlicense.com
@SharedLicenseSupport
Channel :
@SharedLicense
🚨 CRITICAL PHP SECURITY UPDATE — PATCH NOW!
Two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, rated CVSS 9.2, can allow unauthenticated Remote Code Execution (RCE).
☑ Update PHP to these patched versions:
• PHP 8.2 → 8.2.35
• PHP 8.3 → 8.3.36
• PHP 8.4 → 8.4.27
• PHP 8.5 → 8.5.12
🛡 All Server Administrators:
Update your control panel and all installed PHP versions immediately, including cPanel, DirectAdmin, CloudLinux, Plesk, and other hosting environments.
• cPanel: Update cPanel/WHM and all applicable EasyApache 4 PHP packages.
• DirectAdmin: Update CustomBuild and install patched PHP builds.
• CloudLinux: Update Alt-PHP and EA-PHP packages where applicable.
• Plesk / Other Panels: Apply available vendor security updates.
⚠️ PHP 8.1 and older are no longer officially supported upstream. Upgrade to a supported PHP branch or verify patched packages from your OS/vendor.
Updating the control panel alone does not guarantee that every installed PHP version is patched. Check all PHP versions used by websites, PHP-FPM, Apache, CGI, and LiteSpeed, then restart affected services if required.
🔗 Official PHP Security Advisory & Patch Details:
https://www.php.net/archive/2026.php#2026-10-21-5
Sources: PHP.net, GitHub Security Advisories, cPanel, CloudLinux, DirectAdmin.
➖➖➖➖➖➖➖➖➖➖➖➖
SLC Software - SharedLicense
Support :
info@sharedlicense.com
@SharedLicenseSupport
Channel :
@sharedlicense
Two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, rated CVSS 9.2, can allow unauthenticated Remote Code Execution (RCE).
☑ Update PHP to these patched versions:
• PHP 8.2 → 8.2.35
• PHP 8.3 → 8.3.36
• PHP 8.4 → 8.4.27
• PHP 8.5 → 8.5.12
🛡 All Server Administrators:
Update your control panel and all installed PHP versions immediately, including cPanel, DirectAdmin, CloudLinux, Plesk, and other hosting environments.
• cPanel: Update cPanel/WHM and all applicable EasyApache 4 PHP packages.
• DirectAdmin: Update CustomBuild and install patched PHP builds.
• CloudLinux: Update Alt-PHP and EA-PHP packages where applicable.
• Plesk / Other Panels: Apply available vendor security updates.
⚠️ PHP 8.1 and older are no longer officially supported upstream. Upgrade to a supported PHP branch or verify patched packages from your OS/vendor.
Updating the control panel alone does not guarantee that every installed PHP version is patched. Check all PHP versions used by websites, PHP-FPM, Apache, CGI, and LiteSpeed, then restart affected services if required.
🔗 Official PHP Security Advisory & Patch Details:
https://www.php.net/archive/2026.php#2026-10-21-5
Sources: PHP.net, GitHub Security Advisories, cPanel, CloudLinux, DirectAdmin.
➖➖➖➖➖➖➖➖➖➖➖➖
SLC Software - SharedLicense
Support :
info@sharedlicense.com
@SharedLicenseSupport
Channel :
@sharedlicense
📢 **Important Announcement | DirectAdmin Update**
The latest **DirectAdmin version 1.712** is now available.
To update your DirectAdmin panel to the latest version, please open a support ticket with our team.
✅ Assistance with the update process
✅ Guidance for a smooth and safe upgrade
✅ Support to help you get up to date
🎫 Open a support ticket today, and our team will guide you through the update process.
➖➖➖➖➖➖➖➖➖➖➖➖
SLC Software - SharedLicense
Support :
info@sharedlicense.com
@SharedLicenseSupport
Channel :
@sharedlicense
The latest **DirectAdmin version 1.712** is now available.
To update your DirectAdmin panel to the latest version, please open a support ticket with our team.
✅ Assistance with the update process
✅ Guidance for a smooth and safe upgrade
✅ Support to help you get up to date
🎫 Open a support ticket today, and our team will guide you through the update process.
➖➖➖➖➖➖➖➖➖➖➖➖
SLC Software - SharedLicense
Support :
info@sharedlicense.com
@SharedLicenseSupport
Channel :
@sharedlicense